公开(公告)号：US12088628B2

公开(公告)日：2024-09-10

申请号：US17497079

申请日：2021-10-08

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Carlos M. Pignataro ,  Rahul Rammanohar ,  Kondaveeti Lakshmi Ganesh ,  David John Zacks

IPC: H04L9/40

CPC classification number: H04L63/20 ,  H04L63/0876 ,  H04L63/10 ,  H04L63/1408

Abstract: In one embodiment, an access policy enforcement service receives a user authentication request from an end-user device. The access policy enforcement service identifies a telemetry collection intent from the user authentication request. The access policy enforcement service determines a monitoring policy based on the telemetry collection intent identified from the user authentication request. The access policy enforcement service configures, according to the monitoring policy, one or more telemetry collection agents to collect telemetry for traffic associated with the end-user device.

公开(公告)号：US20170331669A1

公开(公告)日：2017-11-16

申请号：US15152024

申请日：2016-05-11

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Kondaveeti Lakshmi Ganesh ,  Joseph Michael Clarke ,  Carlos M. Pignataro

IPC: H04L12/24 ,  H04L29/06

Abstract: Approaches are disclosed for virtualizing a network management protocol (NMP). A network element offloads processes for communicating in the NMP to a virtualization engine (e.g., a backend virtualization proxy for the network element). The network element transmits a message containing a NMP request to the virtualization engine using service function chaining (SFC) by inserting service plane protocol data (e.g., a network service header (NSH)) into the message (e.g., an impregnated request). The virtualization engine expropriates, from the network element, processes for communicating in the NMP and can, thereby, reduce the computational resources used by the network element for communicating in the NMP. The virtualization engine generates a NMP response to the NMP request. The virtualization engine transmits a different message containing the NMP response to the network element using SFC by inserting service plane protocol data into the message (e.g., an impregnated response).

公开(公告)号：US10756945B2

公开(公告)日：2020-08-25

申请号：US15152024

申请日：2016-05-11

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Kondaveeti Lakshmi Ganesh ,  Joseph Michael Clarke ,  Carlos M. Pignataro

IPC: G06F15/16 ,  H04L12/24

Abstract: Approaches are disclosed for virtualizing a network management protocol (NMP). A network element offloads processes for communicating in the NMP to a virtualization engine (e.g., a backend virtualization proxy for the network element). The network element transmits a message containing a NMP request to the virtualization engine using service function chaining (SFC) by inserting service plane protocol data (e.g., a network service header (NSH)) into the message (e.g., an impregnated request). The virtualization engine expropriates, from the network element, processes for communicating in the NMP and can, thereby, reduce the computational resources used by the network element for communicating in the NMP. The virtualization engine generates a NMP response to the NMP request. The virtualization engine transmits a different message containing the NMP response to the network element using SFC by inserting service plane protocol data into the message (e.g., an impregnated response).

公开(公告)号：US11716305B2

公开(公告)日：2023-08-01

申请号：US17361647

申请日：2021-06-29

Applicant: Cisco Technology Inc.

Inventor： Nagendra Kumar Nainar ,  Rahul Rammanohar ,  Kondaveeti Lakshmi Ganesh ,  Carlos M. Pignataro

IPC: H04L61/103 ,  H04L45/745 ,  H04L101/622

CPC classification number: H04L61/103 ,  H04L45/745 ,  H04L2101/622

Abstract: The present disclosure is directed systems and methods for control embedding data packets for ARP queries, the methods including the steps of receiving a data plane packet from a first user device, the data plane packet requesting a hardware address associated with a second user device; generating a northbound control plane packet for transmission to a control plane node, the northbound control plane packet for requesting from the control plane node the hardware address associated with the second user device; embedding the data plane packet in the northbound control plane packet; and forwarding the northbound control plane packet with the data plane packet to the control plane node for respective processing of the northbound control plane packet and the data plane packet.

公开(公告)号：US20230112101A1

公开(公告)日：2023-04-13

申请号：US17497079

申请日：2021-10-08

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Carlos M. Pignataro ,  Rahul Rammanohar ,  Kondaveeti Lakshmi Ganesh ,  David John Zacks

IPC: H04L29/06

Abstract: In one embodiment, an access policy enforcement service receives a user authentication request from an end-user device. The access policy enforcement service identifies a telemetry collection intent from the user authentication request. The access policy enforcement service determines a monitoring policy based on the telemetry collection intent identified from the user authentication request. The access policy enforcement service configures, according to the monitoring policy, one or more telemetry collection agents to collect telemetry for traffic associated with the end-user device.

公开(公告)号：US20220417205A1

公开(公告)日：2022-12-29

申请号：US17361647

申请日：2021-06-29

Applicant: Cisco Technology Inc.

Inventor： Nagendra Kumar Nainar ,  Rahul Rammanohar ,  Kondaveeti Lakshmi Ganesh ,  Carlos M. Pignataro

IPC: H04L29/12 ,  H04L12/741

Abstract: The present disclosure is directed systems and methods for control embedding data packets for ARP queries, the methods including the steps of receiving a data plane packet from a first user device, the data plane packet requesting a hardware address associated with a second user device; generating a northbound control plane packet for transmission to a control plane node, the northbound control plane packet for requesting from the control plane node the hardware address associated with the second user device; embedding the data plane packet in the northbound control plane packet; and forwarding the northbound control plane packet with the data plane packet to the control plane node for respective processing of the northbound control plane packet and the data plane packet.